$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.mft (raw, json) Hash identifier: vo1NyY7pwcOlQ0JcPMNVecdRATNLB2KuXXFxokx3jjg= Subject key identifier: 0A:45:7D:0C:CB:2D:2A:42:3A:9B:D5:04:4C:06:D0:A5:91:20:E8:4C Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019CA97C9C99D4017FDDDDFD709F2758AE2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft Manifest number: 0D01 Signing time: Sun 01 Mar 2026 13:00:41 +0000 Manifest this update: Sun 01 Mar 2026 13:00:41 +0000 Manifest next update: Mon 02 Mar 2026 13:00:41 +0000 Files and hashes: 1: 1-iqnIyKfffTeip77QQglSkGC66k.asa (hash: tm5ocWQ4F8iL11rdh167B46m++zYGle2Ua0389CC5aI=) 2: 1-nCQN0VaQ2ael-H6q4WDuaNQ3YY.asa (hash: KIdLVAXXfbqG6AUAL9K0nR+wv3qEFvVz82UnXZsV/e0=) 3: 4drBeY0WR_A1GPJtZA4YXlykfh4.roa (hash: uPxG8eo/1XvDANn6qBOuvVB20xa9nluualatLIHzSnQ=) 4: 58B9uYgBM8XNzgBbyhEbVSzRTFM.crl (hash: B7E74OY8DSDVcPmT/eCGsUcfJIeOpfl5rnM2yAQiZbA=) 5: 7uHJu7In6geY62mGLWsA-BkgXxQ.roa (hash: pCDrNYSeQf8254wV63If3iDd+pDCOI3GCLUFpM1rWQ4=) 6: BOsl0qn4uIqkA_a-sd3d5l-tYXE.asa (hash: WTaPLVm9v1a65g9j7GNkbyW3n2otJVScGC1bf2hl4GA=) 7: BoeMKNwlhEwpOy1dRFh8Q6mpryA.roa (hash: hmgm/Pnh2iZKFyyt03L0VwIKzZWIKaWyCr/JtLV+SZ0=) 8: OpTtVKAksYNEjp3sCGLjB77TEtQ.roa (hash: CAYkdDo7AOeXQO9VIZQbkqyLJ0Mm55TJfWGJgk3xupc=) 9: m_98aREObyeD712Ey5gRbDiZuLo.roa (hash: O+Oki3q+yMkC01ENxqqfabIW79L+GAIiTNddxHZ4sdw=) 10: o0nlrJylYIGYsWBjRFGVnG7mqFk.roa (hash: ytLMden+iVQSZ4MVhXxgpNGbvtp5EMg2V51G3jlU0Tc=) 11: qEsk61krs4UNghsWKgM1rpZTsAA.roa (hash: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE=) 12: xSo_S4mp4KylJ282tG2KBfx1kB4.roa (hash: y6cL2LAD2UaFnNZj8A3tj8qtOaCatFdh20b64QN2mxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:9c:99:d4:01:7f:dd:dd:fd:70:9f:27:58:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Mar 1 13:00:41 2026 GMT Not After : Mar 2 13:00:41 2026 GMT Subject: CN=0a457d0ccb2d2a423a9bd5044c06d0a59120e84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:84:32:e7:44:e2:c7:92:ba:a0:96:a8:06:49: 35:03:79:a1:69:60:e0:8b:74:ae:7b:6b:33:18:78: 43:ff:c8:e0:7b:da:13:4a:19:17:b7:5e:1b:89:32: 86:c2:a9:5c:8c:99:86:a8:0f:ee:d1:b0:d3:c3:77: c7:ed:ac:27:22:52:e1:8d:0c:37:cf:18:fa:78:31: 2a:46:f6:2b:b4:44:12:82:3b:d2:14:33:72:19:91: db:7e:90:42:34:cf:ee:b9:84:22:27:17:9b:5e:aa: 87:06:59:d2:fc:9f:61:e7:06:c2:7f:14:2e:81:64: 5b:e7:80:34:9f:32:e0:fc:04:1e:f4:1a:e6:b3:dd: 19:cb:bc:89:e8:3a:ff:0c:9c:99:ab:33:78:60:b5: bd:e3:18:d3:0b:c9:39:9c:7f:7f:27:74:9d:3d:c4: eb:38:c5:bb:f1:8f:8f:3a:c3:33:b4:48:2c:91:4c: 0f:1e:66:ed:e9:d0:d6:a1:3e:02:d9:16:77:11:d6: e7:8c:ac:68:5a:2c:95:b5:aa:ad:f6:e6:48:a7:f3: 9d:df:61:3a:56:38:f5:13:4b:7b:91:f0:ce:fe:f7: a2:5b:56:a9:d0:10:a1:bb:9b:29:b1:d3:46:71:c5: 51:9f:41:77:17:45:54:37:5c:71:34:60:c6:ce:47: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:45:7D:0C:CB:2D:2A:42:3A:9B:D5:04:4C:06:D0:A5:91:20:E8:4C X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:68:a6:0e:95:6f:2d:28:5a:f0:f3:b8:ff:be:bb:d9:86:08: b6:b7:c0:8a:f5:dc:c8:32:2b:41:b1:3c:a8:a3:bf:2a:cd:21: bb:0a:6c:c2:a9:4a:cc:d6:2b:bf:86:3c:a3:c5:cd:92:0f:f5: a8:8f:2e:3b:de:43:c7:42:d9:4e:a5:49:d4:af:81:f3:9c:02: fc:76:94:d2:63:86:78:da:00:0f:07:2f:a4:32:0b:7b:b2:79: 4e:d4:09:d0:7b:b1:fc:ff:f1:f6:1e:61:2b:34:f9:59:17:f0: 61:83:6d:63:53:a9:c2:e0:93:f1:7e:aa:27:d9:81:45:1e:f5: 8b:26:b1:60:6f:39:7d:37:92:34:04:8f:f8:f0:ca:41:74:c9: 5d:a2:32:c6:0f:60:f0:4a:eb:02:2c:75:8e:f1:52:c0:78:fa: 2c:a3:6a:05:5b:28:55:23:41:36:81:cc:3c:84:f0:55:85:7f: a8:f7:29:f6:40:b4:d4:ef:56:58:b2:52:a6:97:f2:40:32:76: 38:3c:65:82:d8:ec:ca:39:50:00:50:ac:94:9f:47:65:e2:e6: b2:7c:e0:ce:3b:b6:21:9c:2d:bf:90:24:75:dd:1f:8b:5c:da: f6:14:ea:34:d4:17:ae:71:b0:7b:cb:3f:4d:d6:27:d4:09:94: 96:c3:1f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfJyZ1AF/3d39cJ8nWK4tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMzAxMTMwMDQxWhcNMjYwMzAyMTMwMDQxWjAzMTEwLwYDVQQD EygwYTQ1N2QwY2NiMmQyYTQyM2E5YmQ1MDQ0YzA2ZDBhNTkxMjBlODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oQy50Tix5K6oJaoBkk1A3mhaWDg i3Sue2szGHhD/8jge9oTShkXt14biTKGwqlcjJmGqA/u0bDTw3fH7awnIlLhjQw3 zxj6eDEqRvYrtEQSgjvSFDNyGZHbfpBCNM/uuYQiJxebXqqHBlnS/J9h5wbCfxQu gWRb54A0nzLg/AQe9Brms90Zy7yJ6Dr/DJyZqzN4YLW94xjTC8k5nH9/J3SdPcTr OMW78Y+POsMztEgskUwPHmbt6dDWoT4C2RZ3EdbnjKxoWiyVtaqt9uZIp/Od32E6 Vjj1E0t7kfDO/veiW1ap0BChu5spsdNGccVRn0F3F0VUN1xxNGDGzkdLaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApFfQzLLSpCOpvVBEwG0KWRIOhMMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2imDpVv LSha8PO4/7672YYItrfAivXcyDIrQbE8qKO/Ks0huwpswqlKzNYrv4Y8o8XNkg/1 qI8uO95Dx0LZTqVJ1K+B85wC/HaU0mOGeNoADwcvpDILe7J5TtQJ0Hux/P/x9h5h KzT5WRfwYYNtY1OpwuCT8X6qJ9mBRR71iyaxYG85fTeSNASP+PDKQXTJXaIyxg9g 8ErrAix1jvFSwHj6LKNqBVsoVSNBNoHMPITwVYV/qPcp9kC01O9WWLJSppfyQDJ2 ODxlgtjsyjlQAFCslJ9HZeLmsnzgzju2IZwtv5Akdd0fi1za9hTqNNQXrnGwe8s/ TdYn1AmUlsMfwA== -----END CERTIFICATE-----Generated at Sun Mar 1 19:16:41 2026 by rpki-client